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(54) Method and apparatus for encrypting contents information 



(57) A first- key signal representative of a first key is 
generated from first-key base information being a base 
of the first key. Contents information is encrypted into 
encryption -resultant co ntents information in response to 
the first-key signal. A second-key signal representative 
of a second key is generated on the basis of initial-value 
information of a given initial value according to a prede- 



termined key generation algorithm. The first-key base 
information is encrypted into encryption-resultant first- 
key base information in response to the second-key sig- 
nal. The encryption-resultant contents information, the 
encryption- resultant first- key base information, the ini- 
tial-value information, and algorithm identification infor- 
mation for identifying the predetermined key generation 
algorithm are transmitted or recorded. 
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Description 

[0001] This invention relates to a method of transmit- 
ting contents information. Also, this invention relates to 
a method of recording contents information. In addition, 
this invention relates to an apparatus for transmitting 
contents Information. Furthermore, this invention re- 
lates to an apparatus for recording contents information. 
Also, this invention relates to a transmission medium. In 
addition, this invention relates to a recording medium. 
Furthermore, this invention relates to a method of de- 
crypting contents information. Also, this invention re- 
lates to an apparatus for decrypting contents informa- 
tion. 

[0002] Japanese published unexamined patent appli- 
cation 10-269289 discloses a system for managing the 
distribution of digital contents. In the system of Japa- 
nese application 10-269289, a distributor side encrypts 
and compresses digital contents into processing-result- 
ant digital contents. The distributor side transmits the 
processing-resultant digital contents, an encryption-re- 
sultant contents key, and encryption -resultant account- 
ing information to a communication opposite party. The 
distributor side implements a process of receiving a 
charge on the basis of contents use information trans- 
mitted from the communication opposite party. Then, 
the distributor side implements a process of dividing the 
received charge among interested persons including a 
copyright holder of the digital contents. On the other 
hand, a userside (a digital contents player) decrypts and 
expands the processing-resultant digital contents in re- 
sponse to the contents key, thereby reproducing the 
original digital contents. The userside subjects the ac- 
counting information to a reducing process responsive 
to the use of the digital contents. The userside transmits 
the reduced accounting information and the contents 
use information to the distributor side. 
[0003] Japanese published unexamined patent appli- 
cation 1 0-283268 discloses a system in which a record- 
ing medium stores encryption-resultant main informa- 
tion, and also encryption-resultant information repre- 
senting a key for decrypting the encryption -resultant 
main information. Non-encrypted information represent- 
ing conditions of decrypting the encryption-resultant 
main information is added to the encryption-resultant 
key information. In more detail, the encryption-resultant 
key information has non-encrypted control information 
which contains device information and region informa- 
tion. The control information is designed to prevent the 
encryption-resultant main information from being copied 
onto a magnetic recording medium or an optical disc in 
a user side for illegal use thereof. 
[0004] Generally, typical cryptosystems (encryption- 
decryption systems) are of a symmetric type and an 
asymmetric type. In the symmetric cryptosystem, a 
common key is used by both an encryption side and a 
decryption side. On the other hand, the asymmetric 
cryptosystem uses a public key and a secret key. The 



symmetric cryptosystem is better than the asymmetric 
cryptosystem in data processing rate. 
[0005] In a known hybrid cryptosystem, an encryption 
side encrypts contents information in response to a con- 
5 tents key according to a symmetric cryptography, and 
transmits the encryption-resultant contents information 
to a decryption side. In addition, the encryption side en- 
crypts the contents key according to an asymmetric 
cryptography, and transmits the encryption-resultant 
10 contents key to the decryption side. 

[0006] It is known to set a common master key in both 
an encryption side and a decryption side. In this case, 
an encryption side encrypts a contents key in response 
to the master key according to a symmetric cryptogra- 
ms phy, and transmits the encryption-resultant contents key 
to the decryption side. 

[0007] In a prior-art symmetric cryptosystem using a 
contents key and a master key, both an encryption side 
and a decryption side know cryptographic algorithms 

20 providing a cryptographic relation among a master key, 
a contents key, and contents information. Accordingly, 
it is possible to make an imitation of the decryption side, 
that is, an illegal machine of the decryption side, only 
from knowledge of the encryption side. 

25 [0008] It is a first object of this invention to provide an 
improved method of transmitting contents information. 
[0009] It is a second object of this invention to provide 
an improved method of recording contents information. 
[0010] It is a third object of this invention to provide 

30 an improved apparatus for transmitting contents infor- 
mation. 

[0011] It is a fourth object of this invention to provide 
an improved apparatus for recording contents informa- 
tion. 

35 [0012] It is a fifth object of this invention to provide an 
improved transmission medium. 

[0013] It is a sixth object of this invention to provide 
an improved recording medium. 

[0014] It is a seventh object of this invention to provide 
40 an improved method of decrypting contents information. 
[001 5] It is an eighth object of this invention to provide 
an improved apparatus for decrypting contents informa- 
tion. 

[001 6] A first aspect of this invention provides a meth- 
45 od of transmitting contents information. The method 
comprises the steps of generating a first-key signal rep- 
resentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contents information in 
50 response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; en- 
crypting the first-key base information into encryption- 
's resultant first-key base information in response to the 
second-key signal; and transmitting the encryption-re- 
sultant contents information, the encryption-resultant 
first-key base information, the initial-value information, 
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and algorithm identification information for identifying 
the predetermined key generation algorithm. 
[0017] A second aspect of this invention provides a 
method of recording contents information. The method 
comprises the steps of generating a first- key signal rep- 
resentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption -resultant contents information in 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; en- 
crypting the first-key base information into encryption- 
resultant first-key base information in response to the 
second-key signal; and recording the encryption-result- 
ant contents information, the encryption-resultant first- 
key base information, the initial-value information, and 
algorithm identification information for identifying the 
predetermined key generation algorithm. 
[0018] A third aspect of this invention provides an ap- 
paratus for transmitting contents information. The appa- 
ratus comprises means for generating a first-key signal 
representative of a first key from first- key base informa- 
tion being a base of the first key; means for encrypting 
contents information into encryption -resultant contents 
information in response to the first-key signal; means for 
generating a second-key signal representative of a sec- 
ond key on the basis of initial-value information of a giv- 
en initial value according to a predetermined key gen- 
eration algorithm; means for encrypting the first-key 
base information into encryption -resultant first-key base 
information in response to the second-key signal; and 
means for transmitting the encryption-resultant contents 
information, the encryption -resultant first- key base in- 
formation, the initial-value information, and algorithm 
identification information for identifying the predeter- 
mined key generation algorithm. 

[0019] A fourth aspect of this invention provides an 
apparatus for recording contents information. The ap- 
paratus comprises means for generating a first-key sig- 
nal representative of a first key from first-key base infor- 
mation being a base of .the first key; means for encrypt- 
ing contents information into encryption-resultant con- 
tents information in response to the first-key signal; 
means for generating a second-key signal representa- 
tive of a second key on the basis of initial-value infor- 
mation of a given initial value according to a predeter- 
mined key generation algorithm; means for encrypting 
the first-key base information into encryption -resultant 
first-key base information in response to the second- key 
signal; and means for recording the encryption-resultant 
contents information, the encryption-resultant first-key 
base information, the initial-value information, and algo- 
rithm identification information for identifying the prede- 
termined key generation algorithm. 
[0020] A fifth aspect of this invention provides a trans- 
mission medium for transmitting encryption -resultant 
contents information, encryption-resultant first-key base 



information, initial-value information, and algorithm 
identification information, wherein the encryption-result- 
ant contents information and the encryption-resultant 
first- key base information are generated by the steps of 

5 generating a first-key signal representative of a first key 
from first-key base information being a base of the first 
key; encrypting contents information into encryption-re- 
sultant contents information in response to the first-key 
signal; generating a second-key signal representative 

10 of a second key on the basis of initial-value information 
of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base 
information into encryption- resultant first-key base in- 
formation in response to the second-key signal; and 

is wherein the algorithm identification information is for 
identifying the predetermined key generation algorithm. 
[0021] A sixth aspect of this invention provides a re- 
cording medium loaded with encryption -resultant con- 
tents information, encryption-resultant first-key base in- 

20 formation, initial-value information, and algorithm iden- 
tification information, wherein the encryption-resultant 
contents information and the encryption-resultant first- 
key base information are generated by the steps of gen- 
erating a first-key signal representative of a first key 

25 from first-key base information being a base of the first 
key; encrypting contents information into encryption-re- 
sultant contents information in response to the first- key 
signal; generating a second-key signal representative 
of a second key on the basis of initial-value information 

30 of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base 
information into encryption -resultant first-key base in- 
formation in response to the second-key signal; and 
wherein the algorithm identification information is for 

35 identifying the predetermined key generation algorithm. 
[0022] A seventh aspect of this invention is based on 
the third aspect thereof, and provides an apparatus 
wherein the means for generating the second-key signal 
comprises a linear feedback shift register using a spec- 

40 jf jed irreducible primitive polynomial. 

[0023] An eighth aspect of this invention provides a 
method of transmitting contents information. The meth- 
od comprises the steps of generating a first-key signal 
representative of a first key from first- key base informa- 

45 tion being a base of the first key; encrypting contents 
information into encryption-resultant contents informa- 
tion in response to the first-key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of initial-value information of a given initial value 

so according to a predetermined key generation algorithm; 
encrypting a part of the first-key base information in re- 
sponse to the second-key signal to convert the first-key 
base information into encryption-resultant first-key base 
information; and transmitting the encryption- resultant 

55 contents information, the encryption-resultant first-key 
base information, the initial-value information, and algo- 
rithm identification information for identifying the prede- 
termined key generation algorithm. 
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[0024] A ninth aspect of this invention provides a 
method of recording contents information. The method 
comprises the steps of generating a first-key signal rep- 
resentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption -resultant contents information in 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; en- 
crypting a part of the first-key base information in re- 
sponse to the second-key signal to convert the first-key 
base information into encryption-resultant first-key base 
information; and recording the encryption-resultant con- 
tents information, the encryption -resultant first- key base 
information, the initial-value information, and algorithm 
identification information for identifying the predeter- 
mined key generation algorithm. 
[0025] A tenth aspect of this invention provides an ap- 
paratus for transmitting contents information. The appa- 
ratus comprises means for generating a first-key signal 
representative of a first key from first-key base informa- 
tion being a base of the first key; means for encrypting 
contents information into encryption -resultant contents 
information in response to the first-key signal ; means for 
generating a second-key signal representative of a sec- 
ond key on the basis of initial-value information of a giv- 
en initial value according to a predetermined key gen- 
eration algorithm; means for encrypting a part of the 
first-key base information in response to the second-key 
signal to convert the first-key base information into en- 
cryption-resultant first-key base information; and means 
for transmitting the encryption-resultant contents infor- 
mation, the encryption -resultant first- key base informa- 
tion, the initial-value information, and algorithm identifi- 
cation information for identifying the predetermined key 
generation algorithm. 

[0026] An eleventh aspect of this invention provides 
an apparatus for recording contents information. The 
apparatus comprises means for generating a first- key 
signal representative of a first key from first-key base 
information being a base of the first key; means for en- 
crypting contents information into encryption-resultant 
contents information in response to the first-key signal; 
means for generating a second -key signal representa- 
tive of a second key on the basis of initial-value infor- 
mation of a given initial value according to a predeter- 
mined key generation algorithm; means for encrypting 
a part of the first-key base information in response to 
the second-key signal to convert the first-key base in- 
formation into encryption-resultant first-key base infor- 
mation; and means for recording the encryption -result- 
ant contents information, the encryption -resultant first- 
key base information, the initial-value information, and 
algorithm identification information for identifying the 
predetermined key generation algorithm. 
[0027] A twelfth aspect of this invention provides a 
transmission medium for transmitting encryption-result- 



ant contents information, encryption-resultant first-key 
base information, initial-value information, and algo- 
rithm identification information, wherein the encryption- 
resultant contents information and the encryption-re- 
5 sultant first-key base information are generated by the 
steps of generating a first-key signal representative of 
a first key from first-key base information being a base 
of the first key; encrypting contents information into en- 
cryption-resultant contents information in response to 
io the first-key signal; generating a second-key signal rep- 
resentative of a second key on the basis of initial-value 
information of a given initial value according to a prede- 
termined key generation algorithm; and encrypting a 
part of the first-key base information in response to the 
second-key signal to convert the first- key base informa- 
tion into encryption-resultant first-key base information; 
and wherein the algorithm identification information is 
for identifying the predetermined key generation algo- 
rithm. 

[0028] A thirteenth aspect of this invention provides a 
recording medium loaded with encryption- resultant con- 
tents information, encryption-resultant first-key base in- 
formation, initial-value information, and algorithm iden- 
tification information, wherein the encryption-resultant 
contents information and the encryption -resultant first- 
key base information are generated by the steps of gen- 
erating a first-key signal representative of a first key 
from first-key base information being a base of the first 
key; encrypting contents information into encryption-re- 
sultant contents information in response to the first-key 
signal; generating a second-key signal representative 
of a second key on the basis of initial-value information 
of a given initial value according to a predetermined key 
generation algorithm; and encrypting a part of the first- 
key base information in response to the second-key sig- 
nal to convert the first-key base information into encryp- 
tion-resultant first-key base information; and wherein 
the algorithm identification information is for identifying 
the predetermined key generation algorithm. 
[0029] A fourteenth aspect of this invention is based 
on the tenth aspect thereof, and provides an apparatus 
wherein the means for generating the second-key sig nal 
comprises a linear feedback shift register using a spec- 
ified irreducible primitive polynomial. 
[0030] A fifteenth aspect of this invention provides a 
method of decrypting encryption-resultant contents in- 
formation generated by an encrypting side which imple- 
ments the steps of generating a first-key signal repre- 
sentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contents information in 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; and 
encrypting the first- key base information into encryp- 
tion-resultant first-key base information in response to 
the second-key signal. The method comprises the steps 
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of identifying the predetermined key generation algo- 
rithm in response to algorithm identification information 
for identifying the predetermined key generation algo- 
rithm; generating a second-key signal representative of 
a second key on the basis of the initial-value information 
and the identified key generation algorithm; decrypting 
encryption- resultant first-key base information into orig- 
inal first- key base information in response to the sec- 
ond-key signal; generating a first-key signal represent- 
ative of a first key from the original first-key base infor- 
mation; and decrypting encryption -resultant contents in- 
formation into original contents information in response 
to the first-key signal. 

[0031] A sixteenth aspect of this invention provides 
an apparatus for decrypting encryption-resultant con- 
tents information generated by an encrypting side which 
implements the steps of generating a first-key signal 
representative of a first key from first-key base informa- 
tion being a base of the first key; encrypting contents 
information into encryption-resultant contents informa- 
tion in response to the first- key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of initial-value information of a given initial value 
according to a predetermined key generation algorithm; 
and encrypting the first-key base information into en- 
cryption-resultant first-key base information in response 
to the second-key signal. The apparatus comprises 
means for identifying the predetermined key generation 
algorithm in response to algorithm identification infor- 
mation for identifying the predetermined key generation 
algorithm; means for generating a second-key signal 
representative of a second key on the basis of the initial- 
value information and the identified key generation al- 
gorithm; means for decrypting encryption-resultant first- 
key base information into original first-key base informa- 
tion in response to the second-key signal; means for 
generating a first- key signal representative of a first key 
from the original first-key base information; and means 
for decrypting encryption-resultant contents information 
into original contents information in response to the first- 
key signal. 

[0032] A seventeenth aspect of this invention is based 
on the sixteenth aspect thereof, and provides an appa- 
ratus wherein the identifying means comprises means 
for selecting one from among a plurality of key genera- 
tion algorithms in response to the algorithm identifica- 
tion information as the identified key generation algo- 
rithm. 

[0033] An eighteenth aspect of this invention is based 
on the seventeenth aspect thereof, and provides an ap- 
paratus wherein the means for generating the second- 
key signal comprises a linear feedback shift register 
having a feedback object position which is set in accord- 
ance with a primitive polynomial in the identified key 
generation algorithm. 

[0034] A nineteenth aspect of this invention provides 
a method of decrypting encryption-resultant contents in- 
formation generated by an encrypting side which imple- 



ments the steps of generating a first-key signal repre- 
sentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption -resultant contents information in 
5 response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; and 
encrypting a part of the first-key base information in re- 
io sponse to the second-key signal to convert the first-key 
base information into encryption -resultant first- key base 
information. The method comprises the steps of identi- 
fying the predetermined key generation algorithm in re- 
sponse to algorithm identification information for identi- 
fy fying the predetermined key generation algorithm; gen- 
erating a second-key signal representative of a second 
key on the basis of the initial-value information and the 
identified key generation algorithm; decrypting encryp- 
tion-resultant first-key base information into original 
first-key base information in response to the second-key 
signal; generating a first-key signal representative of a 
first key from the original first-key base information; and 
decrypting encryption-resultant contents information in- 
to original contents information in response to the first- 
key signal. 

[0035] A twentieth aspect of this invention provides 
an apparatus for decrypting encryption-resultant con- 
tents information generated by an encrypting side which 
implements the steps of generating a first- key signal 
representative of a first key from first- key base informa- 
tion being a base of the first key; encrypting contents 
information into encryption-resultant contents informa- 
tion in response to the first-key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of initial-value information of a given initial value 
according to a predetermined key generation algorithm; 
and encrypting a part of the first-key base information 
in response to the second-key signal to convert the first- 
key base information into encryption-resultant first-key 
base information. The apparatus comprises means for 
identifying the predetermined key generation algorithm 
in response to algorithm identification information for 
identifying the predetermined key generation algorithm; 
means for generating a second-key signal representa- 
tive of a second key on the basis of the initial-value in- 
formation and the identified key generation algorithm; 
means for decrypting encryption-resultant first-key base 
information into original first-key base information in re- 
sponse to the second-key signal; means for generating 
a first-key signal representative of a first key from the 
original first-key base information; and means for de- 
crypting encryption-resultant contents information into 
original contents information in response to the first-key 
signal. 

[0036] A twenty-first aspect of this invention is based 
on the twentieth aspect thereof, and provides an appa- 
ratus wherein the identifying means comprises means 
for selecting one from among a plurality of key genera- 
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tion algorithms in response to the algorithm identifica- 
tion information as the identified key generation algo- 
rithm. 

[0037] A twenty-second aspect of this invention is 
based on the twenty-first aspect thereof, and provides 
an apparatus wherein the means for generating the sec- 
ond-key signal comprises a linear feedback shift register 
having a feedback object position which is set in accord- 
ance with a primitive polynomial in the identified key 
generation algorithm. 

[0038] Fig. 1 is a block diagram of a system for con- 
tents information according to an embodiment of this in- 
vention. 

[0039] Fig. 2 is a block diagram of a key generator in 
a primary side of the system in Fig. 1 . 
[0040] Fig. 3 is a diagram of a reference table repre- 
sented by data stored in a memory in a secondary side 
of the system in Fig. 1 . 

[0041] There now follows a description of the pre- 
ferred embodiment 

[0042] Fig. 1 shows a system for contents information 
according to an embodiment of this invention. The sys- 
tem of Fig. 1 includes a primary section P, a secondary 
section Q, and an intermediate section R. The primary 
section P and the secondary section Q are connected 
to each other via the intermediate section R. 
[0043] The primary section P includes an information 
recording apparatus or an information transmitting ap- 
paratus. The secondary section Q includes an informa- 
tion reproducing apparatus or an information receiving 
apparatus. An example of the information reproducing 
apparatus is an information player. The intermediate 
section R includes a recording medium or a transmis- 
sion medium. Examples of the recording medium are a 
magnetic recording medium, an optical recording medi- 
um, and a semiconductor memory. Examples of the 
transmission medium are an optical fiber cable, electric 
wires, and a radio transmission line. The transmission 
medium is also referred to as a transmission line. 
[0044] The primary section P includes a key generator 
1 and encryptors 2 and 3. The encryptor 3 receives in- 
formation being a base of a first key (a contents key). 
The first-key base information is fed from a suitable de- 
vice (not shown). In addition, the encryptor 3 receives 
contents information from a suitable device (not shown). 
The encryptor 3 has a calculating block and an encrypt- 
ing block. The calculating block in the encryptor 3 gen- 
erates a signal (data) representative of the first key from 
the first-key base information. The encrypting block in 
the encryptor 3 encrypts the contents information into 
encryption-resultant contents information in response to 
the first-key signal. The encryptor 3 outputs the encryp- 
tion-resultant contents information to the intermediate 
section R. The encryption by the encryptor 3 may be 
based on a known encryption algorithm such as DES. 
[0045] Specifically, the primary section P records the 
encryption-resultant contents information on the record- 
ing medium of the intermediate section R, or transmits 



the encryption-resultant contents information to the 
transmission line of the intermediate section R. 
[0046] The key generator 1 receives information rep- 
resentative of an initial value from a suitable device (not 
s shown). The key generator 1 produces a signal repre- 
sentative of a second key from the initial-value informa- 
tion according to a key generation algorithm. The key 
generator 1 outputs the second-key signal to the encryp- 
tor 2. 

10 [0047] The encryptor 2 receives the first-key base in- 
formation. The encryptor 2 encrypts the first-key base 
information into encryption -resultant first-key base in- 
formation in response to the second-key signal. The en- 
cryptor 2 outputs the encryption -resultant first-key base 

15 information to the intermediate section R. The encryp- 
tion by the encryptor 2 may be based on a known en- 
cryption algorithm such as DES. 
[0048] Specifically, the primary section P records the 
encryption -resultant first-key base information on the re- 

20 cording medium of the intermediate section R, or trans- 
mits the encryption-resultant first- key base information 
to the transmission line of the intermediate section R. 
[0049] The encryptor 2 may encrypt a part of the first- 
key base information in response to the second-key sig- 

25 nal. For example, the encryptor 2 encrypts only an im- 
portant portion of the first-key base information. Alter- 
natively, the encryptor 2 may encrypt the whole of the 
first-key base information. 

[0050] The primary section P outputs the initial-value 

30 information to the intermediate section R. Specifically, 
the primary section P records the initial-value informa- 
tion on the recording medium of the intermediate section 
R, or transmits the initial-value information to the trans- 
mission line of the intermediate section R. 

35 [0051] Information representative of an identification 
(ID) number of the key generation algorithm used by the 
key generator 1 is available in the primary section P. For 
example, the algorithm-number information is fed from 
a suitable device (not shown). The primary section P 

^0 outputs the algorithm-number information to the inter- 
mediate section R. Specifically, the primary section P 
records the algorithm -number information on the re- 
cording medium of the intermediate section R, or trans- 
mits the algorithm-number information to the transmis- 

45 sion line of the intermediate section R. 

[0052] Preferably, the primary section P has a multi- 
plexer which combines the algorithm-number informa- 
tion, the initial-value information, the encryption-result- 
ant first-key base information, and the encryption-result- 

50 ant contents information into multiplexing-resultant in- 
formation of a predetermined format. In this case, the 
primary section P outputs the multiplexing-resultant in- 
formation to the intermediate section R. Specifically, the 
primary section P records the multiplexing-resultant in- 

55 formation on the recording medium of the intermediate 
section R, or transmits the multiplexing-resultant infor- 
mation to the transmission line of the intermediate sec- 
tion R. 
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[0053] The primary section P may include signal con- 
verters which change the algorithm -number information 
and the initial-value information according to predeter- 
mined functions. In this case, the primary section P out- 
puts the change-resultant algorithm-number informa- 5 
tion and the change-resultant initial-value information to 
the intermediate section R. Specifically, the primary sec- 
tion P records the change-resultant algorithm-number 
information and the change-resultant initial-value infor- 
mation on the recording medium of the intermediate 10 
section R, or transmits the change-resultant algorithm- 
number information and the change-resultant initial-val- 
ue information to the transmission line of the intermedi- 
ate section R. 

[0054] The second key produced by the key generator *5 
1 acts as a higher-rank key with respect to the first key 
(the contents key). Preferably, the second key is de- 
signed to change randomly and greatly in response to 
the initial value. 

[0055] The key generator 1 includes a circuit having 20 
N bits, where N denotes a predetermined natural 
number. Fig. 2 shows an example of the key generator 
1 . In the key generator 1 of Fig. 2, an included circuit 
has 8 bits, and thus N = 8. 

[0056] The key generator 1 in Fig. 2 includes 1 -bit shift 25 
registers r1 -r8, AND gates gl-g8, Exclusive-OR gates al- 
a7, a signal converter 1 A, and multi-bit (8-bit) buses 1B 
and 1C. The shift registers rl-r8, the AND gates gl-g8, 
and the Exclusive-OR gates al-a7 are combined to form 
a linear feedback shift register (LFSR) having 8 bits (N 30 
= 8). 

[0057] The shift registers rl-r8 are connected in a lin- 
ear array or a series array. Setting terminals of the shift 
registers r1-r8 are connected to bit lines of the bus 1B, 
respectively. First input terminals of the AND gates gl- 35 
g& are connected to bit lines of the bus 1 C, respectively. 
Second input terminals of the AND gates g1 -g8 are con- 
nected to the output terminals of the shift registers r1 -r8, 
respectively. The output terminals of the AND gates gl- 
g7 are connected to first input terminals of the Exclusive- 40 
OR gate a1-a7, respectively. The output terminal of the 
AND gate g8 is connected to a second input terminal of 
the Exclusive-OR gate a7. The output terminal of the 
Exclusive-OR gate a7 is connected to a second input 
terminal of the Exclusive-OR gate a6. The output termi- *s 
nal of the Exclusive-OR gate a6 is connected to a sec- 
ond input terminal of the Exclusive-OR gate a5. The out- 
put terminal of the Exclusive-OR gate a5 is connected 
to a second input terminal of the Exclusive-OR gate a4. 
The output terminal of the Exclusive-OR gate a4 is con- so 
nected to a second input terminal of the Exclusive-OR 
gate a3. The output terminal of the Exclusive-OR gate 
a3 is connected to a second input terminal of the Exclu- 
sive-OR gate a2. The output terminal of the Exclusive- 
OR gate a2 is connected to a second input terminal of ss 
the Exclusive-OR gate al. The output terminal of the Ex- 
clusive-OR gate al is connected to the input terminal of 
the shift register r1 . The input terminal of the signal con- 
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verter 1 A is connected to the output terminal of the shift 
register r8. The output terminal of the signal generator 
1 A leads to the encryptor 2 (see Fig. 1). 
[0058] Bits of the information representative of the in- 
itial value are fed via the bus 1 B to the shift registers 
r2-r8, respectively. The bits of the initial-value informa- 
tion are set in the shift registers r2-r8, respectively. At 
least one of the bits of the initial-value information differs 
from °0". Bits of information representative of a coeffi- 
cient are fed via the bus 1 C to the first input terminals 
of the AND gates gl-g8, respectively. Each of the AND 
gates gl-g8 assumes a closed state or an open state (a 
conductive state or a non-conductive state) in accord- 
ance with the logic state of a related bit of the coefficient 
information. Thereafter, a clock signal is fed from a suit- 
able device (not shown) to the shift registers rl-r8 so that 
1 -bit signals are moved in the shift-register array toward 
the signal converter 1 A. Open ones (conductive ones) 
of the AND gates g1 -g8 conduct the output signals from 
related shift registers to related Exclusive-OR gates. 
The positions of open ones of the AND gates gl-g8 cor- 
respond to positions in the shift-register array from 
which 1 -bit signals are fed back. The positions of open 
ones of the AND gates gl-g8 are determined by the co- 
efficient information. On the other hand, closed ones 
(non-conductive ones) of the AND gates gl-g8 output "0" 
signals to related Exclusive-OR gates, and do not con- 
duct the output signals from related shift registers to the 
related Exclusive-OR gates. The Exclusive-OR gates 
a1-a7 execute Exclusive-OR operation with respect to 
the output signals from the AND gates gl-g8. A final re- 
sult of the Exclusive-OR operation is fed back from the 
lowest-place Exclusive-OR gate al to the input terminal 
of the lowest-place shift register it The output signal 
from the highest-place shift register r8 is an maximum 
length code signal. 

[0059] The signal converter 1A receives the maxi- 
mum length code signal from the highest-place shift reg- 
ister r8. The signal converter 1 A changes the maximum 
length code signal into the second-key signal according 
to a predetermined nonlinear function based on, for ex- 
ample, a nonlinearity of a multiplier. The signal converter 
1 A outputs the second-key signal to the encryptor 2 (see 
Fig. 1). 

[0060] Preferably, the coefficient, the information of 
which is fed to the AND gates gl-g8, corresponds to a 
specified N-order irreducible primitive polynomial. The 
following 8-order primitive polynomial is taken as an ex- 
ample. 

x 8 + x 7 + x 2 + x+1 (1) 

In the case of the polynomial (1), the coefficient infor- 
mation hasbits being "1", "1", "0", "0", "0", M 0", "1", and 
"1" respectively. In this case, "1", "I", "0", "0", "0" , "0", 
"1", and "1 " are fed to the AND gates g8, g7, g6, g5, g4, 
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g3, g2, and g1 , respectively. 

[0061] A specified primitive polynomial corresponding 
to the coefficient information defines a key generation 
algorithm used in the key generator 1 . Accordingly, the 
identification number (the ID number) of the key gener- 
ation algorithm is uniquely determined for the specified 
primitive polynomial. 

[0062] The algorithm-number information, the initial- 
value information, the encryption-resultant first-key 
base information, and the encryption-resultant contents 
information are transmitted from the primary section P 
to the secondary section Q through the intermediate 
section R. 

[0063] The secondary section Q includes a memory 
4, a key generator 5, and decrypting devices 6 and 7. 
The memory 4 uses, for example, a ROM. The memory 
4 stores data representing a reference table of algorithm 
identification (ID) numbers, coefficients, and primitive 
polynomials. The reference table is designed to identify 
a key generation algorithm (a coefficient) from algo- 
rithm-number information. In the reference table, the co- 
efficients are located at different addresses determined 
by the algorithm ID numbers, respectively. Similarly, the 
primitive polynomials are located at different addresses 
determined by the algorithm ID numbers, respectively. 
[0064] Fig. 3 shows an example of the reference table 
in the memory 4. In the reference table of Fig. 3, the 
algorithm ID number "0" is assigned to a coefficient hav- 
ing bits equal to "1", "1", "0", "0", "0", "O", "1", and "1". 
Thus, the algorithm ID number M 0 M is assigned to the pol- 
ynomial "x a + x 7 + x 2 + x + 1 ". The algorithm ID number 
"1" is assigned to a coefficient having bits equal to "1", 
"O", "0", "0", "1", "1", "1", and "0". Thus, the algorithm ID 
number "1" is assigned to the polynomial "x 8 + x 4 + x 3 
+ x 2 + 1". The algorithm ID number ,, 2" is assigned to a 
coefficient having bits equal to "1", "0", "1", "1", "0", "1", 
"0", and "0". Thus, the algorithm ID number "2" is as- 
signed to the polynomial "x 8 + x 6 + x 5 + x 3 + 1". The 
algorithm ID number "3" is assigned to a coefficient hav- 
ing bits equal to u 1", "1", "1", "1", "0", "O", "1", and "1". 
Thus, the algorithm ID number M 3" is assigned to the pol- 
ynomial "x 8 + x 7 + x 6 + x 5 + x 2 + x + 1 ". The algorithm 
ID number "4" is assigned to a coefficient having bits 
equal to "1 ", "0", "0", "1 "0", "1 "0", and "1 Thus, the 
algorithm ID number "4" is assigned to the polynomial 
"x 8 + x 5 + x 3 + x + 1". The algorithm ID number "5" is 
assigned to a coefficient having bits equal to "1", "0", 
"1", "1", "0", "0", "1", and "0". Thus, the algorithm ID 
number "5 H is assigned to the polynomial "x 8 + x 6 + x 5 
■+- x 2 + 1". The algorithm ID number "6" is assigned to a 
coefficient having bits equal to "1", "0", "1", "1", "0", "0", 
"0", and "1". Thus, the algorithm ID number "6" is as- 
signed to the polynomial M x 8 + x 6 + x 5 + x + 1 u . The al- 
gorithm ID n umber "7" is assigned to a coefficient having 
bits equal to "1 ", "0 M , "1 M , "0", M 1 T , ■ 1 and "1 ". Thus, 
the algorithm ID number "7" is assigned to the polyno- 
mial "x 8 + x 6 + x 4 + x 3 + x 2 + x +- 1 
[0065] The memory 4 receives the algorithm-number 



information from the intermediate section R. The re- 
ceived algorithm-number information is used as an ad- 
dress signal, and the reference table in the memory 4 is 
accessed in response to the address signal. As a result, 
s a coefficient and a primitive polynomial corresponding 
to the received algorithm- number information are iden- 
tified. In other words, a key generation algorithm corre- 
sponding to the received algorithm-number information 
is identified. The memory 4 outputs information of the 
10 identified coefficient to the key generator 5. 

[0066] The key generator 5 is similar in design and 
operation to the key generator 1 of the primary section 
P. The key generator 5 receives the initial-value infor- 
mation from the intermediate section R. The key gener- 
is ator 5 reproduces the second-key signal from the initial- 
value information and the coefficient information. The 
key generator 5 outputs the reproduced second-key sig- 
nal to the decrypting device 6. 

[0067] The decrypting device 6 receives the encryp- 

20 tion- resultant first-key base information from the inter- 
mediate section R. Operation of the decrypting device 
6 is inverse with respect to that of the encryptor 2 in the 
primary section P. The decrypting device 6 decrypts the 
encryption-resultant first-key base information into the 

25 first- key base information in response to the second- key 
signal. The decrypting device 6 outputs the first-key 
base information to the decrypting device 7. 
[0068] The decrypting device 7 receives the encryp- 
tion-resultant contents information from the intermedi- 

30 ate section R. Operation of the decrypting device 7 is 
inverse with respect to that of the encryptor 3 in the pri- 
mary section P. The decrypting device 7 has a calculat- 
ing block and a decrypting block. The calculating block 
in the decrypting device 7 generates a signal (data) rep- 

35 resentative of the first key from the first-key base infor- 
mation. The decrypting block in the decrypting device 7 
decrypts the encryption-resultant contents information 
into the original contents information in response to the 
first-key signal. Thus, the decrypting device 7 reproduc- 

40 es the original contents information. The decrypting de- 
vice 7 outputs the reproduced contents information. 
[0069] In the case where the primary section P in- 
cludes the multiplexer, the secondary section Q has a 
demultiplexer which receives the multiplexing-resultant 

45 information from the intermediate section R. The demul- 
tiplexer separates the multiplexing-resultant information 
signal into the algorithm-number information, the initial- 
value information, the encryption-resultant first-key 
base information, and the encryption-resultant contents 

50 information. The demultiplexer feeds the algorithm- 
number information, the initial-value information, the en- 
cryption-resultant first-key base information, and the en- 
cryption-resultant contents information to the memory 
4, the key generator 5, the decrypting device 6, and the 

55 decrypting device 7, respectively. 

[0070] In the case where the primary section P in- 
cludes the signal converters, the secondary section Q 
has inverse signal converters which receive the change- 
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resultant algorithm-number information and the change- 
resultant initial-value information. The inverse signal 
converters return the change-resultant algorithm- 
number information and the change-resultant initial-val- 
ue information to the original algorithm-number informa- 
tion and the original initial-value information, respective- 
ly. The inverse signal converters feed the the original 
algorithm-number information and the original initial-val- 
ue information to the memory 4 and the key generator 
5, respectively. 

[0071] Preferably, the secondary side Q is formed by 
an LSI (large-scale integration) circuit having a single 
body. In this case, it is difficult to illegally access the 
memory 4 from an external. 

[0072] In the system of Fig. 1 , since the reference ta- 
ble is provided only in the memory 4 of the secondary 
section Q, it is difficult to make an imitation of the sec- 
ondary side Q (that is, an illegal machine of the second- 
ary side Q) only from knowledge of the primary section 
P. In the event that an illegal machine of the secondary 
side Q is found, the key generation algorithm used by 
the primary side P and the algorithm-number informa- 
tion transmitted from the primary side P to the secondary 
side Q are changed to make the illegal machine inoper- 
ative. 

[0073] The embodiment of this invention may be mod- 
ified as follows. Specifically, a modification of the em- 
bodiment of this invention provides M information pieces 
composing information being a base of a first key (a con- 
tents key), where M denotes a predetermined natural 
number. In this case, encryption of the first-key base in- 
formation is executed through M stages. The encryp- 
tion-resultant M information pieces are recorded or 
transmitted as the encryption-resultant first-key base in- 
formation. 



Claims 

1 . A method of transmitting contents information, com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first-key base information being a 
base of the first key; 

encrypting contents information into encryp- 
tion-resultant contents information in response 
to the first-key signal; 

generating a second-key signal representative 
of a second key on the basis of initial-value in- 
formation of a given initial value according to a 
predetermined key generation algorithm; 
encrypting the first-key base information into 
encryption-resultant first-key base information 
in response to the second-key signal; and 
transmitting the encryption- resultant contents 
information, the encryption -resultant first-key 
base information, the initial-value information, 
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and algorithm identification information for 
identifying the predetermined key generation 
algorithm. 

5 2. A method of recording contents information, com- 
prising the steps of: 

generating a first- key signal representative of a 
first key from first-key base information being a 
10 base of the first key; 

encrypting contents information into encryp- 
tion-resultant contents information in response 
to the first-key signal; 

generating a second-key signal representative 
15 of a second key on the basis of initial-value in- 

formation of a given initial value according to a 
predetermined key generation algorithm; 
encrypting the first-key base information into 
encryption-resultant first-key base information 
20 in response to the second-key signal; and 

recording the encryption -resultant contents in- 
formation, the encryption -resultant first- key 
base information, the initial-value information, 
and algorithm identification information for 
25 identifying the predetermined key generation 

algorithm. 

3. An apparatus for transmitting contents information, 
comprising: 

30 

means for generating a first-key signal repre- 
sentative of a first key from first-key base infor- 
mation being a base of the first key; 
means for encrypting contents information into 

35 encryption -resultant contents information in re- 

sponse to the first-key signal; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 

40 cording to a predetermined key generation al- 

gorithm; 

means for encrypting the first-key base infor- 
mation into encryption-resultant first-key base 
information in response to the second-key sig- 

45 nal; and 

means for transmitting the encryption-resultant 
contents information, the encryption- resultant 
first-key base information, the initial-value in- 
formation, and algorithm identification informa- 

50 tion for identifying the predetermined key gen- 

eration algorithm. 

4. An apparatus for recording contents information, 
comprising: 

55 

means for generating a first-key signal repre- 
sentative of a first key from first- key base infor- 
mation being a base of the first key; 
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means for encrypting contents information into 
encryption- resultant contents information in re- 
sponse to the first-key signal; 

means for generating a second-key signal rep- 7. 
resentative of a second key on the basis of in- s 
itial-value information of a given initial value ac- 
cording to a predetermined key generation al- 
gorithm; 

means for encrypting the first-key base infor- 8. 
mation into encryption-resultant first-key base 10 
information in response to the second-key sig- 
nal; and 

means for recording the encryption- resultant 
contents information, the encryption- resultant 
first-key base information, the initial-value in- 15 
formation, and algorithm identification informa- 
tion for identifying the predetermined key gen- 
eration algorithm. 

5. A transmission medium for transmitting encryption- 20 
resultant contents information, encryption -resultant 
first-key base information, initial-value information, 
and algorithm identification information, wherein 

the encryption-resultant contents information and 
the encryption -resultant first-key base information 25 
are generated by the steps of generating a first-key 
signal representative of a first key from first- key 
base information being a base of the first key; en- 
crypting contents information into encryption -result- 
ant contents information in response to the first-key 30 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 9. 
ing the first-key base information into encryption-re- 35 
sultant first-key base information in response to the 
second-key signal; and wherein the algorithm iden- 
tification information is for identifying the predeter- 
mined key generation algorithm. 

40 

6. A recording medium loaded with encryption -result- 
ant contents information, encryption -resultant first- 
key base information, initial-value information, and 
algorithm identification information, wherein the en- 
cryption-resultant contents information and the en- 45 
crypti on -resultant first-key base information are 
generated by the steps of generating a first-key sig- 
nal representative of a first key from first-key base 
information being a base of the first key; encrypting 
contents information into encryption-resultant con- so 
tents information in response to the first-key signal; 
generating a second- key signal representative of a 
second key on the basis of initial-value information 

of a given initial value according to a predetermined 
key generation algorithm; and encrypting the first- 
key base information into encryption-resultant first- 
key base information in response to the second-key 
signal; and wherein the algorithm identification in- 



formation is for identifying the predetermined key 
generation algorithm. 

An apparatus as recited in claim 3, wherein the 
means for generating the second-key signal com- 
prises a linear feedback shift register using a spec- 
ified irreducible primitive polynomial. 

A method of transmitting contents information, com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first-key base information being a 
base of the first key; 

encrypting contents information into encryp- 
tion-resultant contents information in response 
to the first-key signal; 

generating a second-key signal representative 
of a second key on the basis of initial-value in- 
formation of a given initial value according to a 
predetermined key generation algorithm; 
encrypting a part of the first- key base informa- 
tion in response to the second-key signal to 
convert the first-key base information into en- 
cryption-resultant first- key base information; 
and 

transmitting the encryption -resultant contents 
information, the encryption-resultant first-key 
base information, the initial-value information, 
and algorithm identification information for 
identifying the predetermined key generation 
algorithm. 

A method of recording contents information, com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first-key base information being a 
base of the first key; 

encrypting contents information into encryp- 
tion-resultant contents information in response 
to the first-key signal; 

generating a second-key signal representative 
of a second key on the basis of initial-value in- 
formation of a given initial value according to a 
predetermined key generation algorithm; 
encrypting a part of the first-key base informa- 
tion in response to the second-key signal to 
convert the first-key base information into en- 
cryption-resultant first-key base information; 
and 

recording the encryption -resultant contents in- 
formation, the encryption-resultant first- key 
base information, the initial-value information, 
and algorithm identification infonnation for 
identifying the predetermined key generation 
algorithm. 
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10. An apparatus for transmitting contents information, 
comprising: 

means for generating a first-key signal repre- 
sentative of a first key from first-key base infor- 5 
mation being a base of the first key; 
means for encrypting contents information into 
encryption-resultant contents information in re- 
sponse to the first-key signal; 
means for generating a second-key signal rep- 10 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 
cording to a predetermined key generation al- 
gorithm; 

means for encrypting a part of the first-key base '5 
information in response to the second-key sig- 
nal to convert the first-key base information into 
encryption -resultant first-key base information; 
and 

means for transmitting the encryption-resultant 20 
contents information, the encryption-resultant 
first-key base information, the initial-value in- 
formation, and algorithm identification informa- 
tion for identifying the predetermined key gen- 
eration algorithm. 25 

11. An apparatus for recording contents information, 
comprising: 

means for generating a first-key signal repre- 30 
sentative of a first key from first-key base infor- 
mation being a base of the first key; 
means for encrypting contents information into 
encryption-resultant contents information in re- 
sponse to the first-key signal; 35 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 
cording to a predetermined key generation al- 
gorithm; 40 
means for encrypting a part of the first-key base 
information in response to the second-key sig- 
nal to convert the first-key base information into 
encryption-resultant first-key base information; 
and 45 
means for recording the encryption-resultant 
contents information, the encryption-resultant 
first-key base information, the initial-value in- 
formation, and algorithm identification informa- 
tion for identifying the predetermined key gen- so 
eration algorithm. 

1 2. A transmission medium for transmitting encryption- 
resultant contents information, encryption-resultant 
first-key base information, initial-value information, 55 
and algorithm identification information, wherein 

the encryption-resultant contents information and 
the encryption -resultant first- key base information 



are generated by the steps of generating a first- key 
signal representative of a first key from first-key 
base information being a base of the first key; en- 
crypting contents information into encryption- result- 
ant contents information in response to the first-key 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 
ing a part of the first-key base information in re- 
sponse to the second-key signal to convert the first- 
key base information into encryption-resultant first- 
key base information; and wherein the algorithm 
identification information information is for identify- 
ing the predetermined key generation algorithm. 

13. A recording medium loaded with encryption-result- 
ant contents information, encryption- resultant first- 
key base information, initial-value information, and 
algorithm identification information, wherein the en- 
cryption-resultant contents information and the en- 
cryption-resultant first-key base information are 
generated by the steps of generating a first-key sig- 
nal representative of a first key from first-key base 
information being a base of the first key; encrypting 
contents information into encryption- resultant con- 
tents information in response to the first-key signal; 
generating a second-key signal representative of a 
second key on the basis of initial-value information 
of a given initial value according to a predetermined 
key generation algorithm; and encrypting a part of 
the first-key base information in response to the 
second-key signal to convert the first-key base in- 
formation into encryption-resultant first-key base in- 
formation; and wherein the algorithm identification 
information is for identifying the predetermined key 
generation algorithm. 

14. An apparatus as recited in claim 10, wherein the 
means for generating the second-key signal com- 
prises a linear feedback shift register using a spec- 
ified irreducible primitive polynomial. 

15. A method of decrypting encryption-resultant con- 
tents information generated by an encrypting side 
which implements the steps of generating a first-key 
signal representative of a first key from first-key 
base information being a base of the first key; en- 
crypting contents information into encryption-result- 
ant contents information in response to the first- key 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 
ing the first-key base information into encryption-re- 
sultant first- key base information in response to the 
second-key signal; the method comprising the 
steps of: 
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identifying the predetermined key generation 
algorithm in response to algorithm identification 
information for identifying the predetermined 
key generation algorithm; 

generating a second-key signal representative s 
of a second key on the basis of the initial-value 
information and the identified key generation 
algorithm; 

decrypting encryption-resultant first-key base 
information into original first-key base informa- io 
tion in response to the second-key signal; 
generating a first-key signal representative of a 
first key from the original first-key base informa- 
tion; and 

decrypting encryption-resultant contents infor- is 
mation into original contents information in re- 
sponse to the first-key signal. 

16. An apparatus for decrypting encryption-resultant 
contents information generated by an encrypting 20 
side which implements the steps of generating a 
first-key signal representative of a first key from 
first-key base information being a base of the first 
key; encrypting contents information into encryp- 
tion-resultant contents information in response to 25 
the first-key signal; generating a second-key signal 
representative of a second key on the basis of ini- 
tial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; 
and encrypting the first-key base information into 20 
encryption-resultant first-key base information in re- 
sponse to the second-key signal; the apparatus 
comprising: 

means for identifying the predetermined key 35 
generation algorithm in response to algorithm 
identification information for identifying the pre- 
determined key generation algorithm; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of the 40 
initial-value information and the identified key 
generation algorithm; 

means for decrypting encryption-resultant first- 
key base information into original first- key base 
information in response to the second-key sig- 45 
nal; 

means for generating a first- key signal repre- 
sentative of a first key from the original first- key 
base information; and 

means for decrypting encryption -resultant con- 50 
tents information into original contents informa- 
tion in response to the first-key signal. 

17. An apparatus as recited in claim 16, wherein the 
identifying means comprises means for selecting ss 
one from among a plurality of key generation algo- 
rithms in response to the algorithm identification in- 
formation as the identified key generation algo- 



rithm. 

18. An apparatus as recited in claim 17, wherein the 
means for generating the second-key signal com- 
prises a linear feedback shift register having a feed- 
back object position which is set in accordance with 
a primitive polynomial in the identified key genera- 
tion algorithm. 

19. A method of decrypting encryption- resultant con- 
tents information generated by an encrypting side 
which implements the steps of generating a first-key 
signal representative of a first key from first- key 
base information being a base of the first key; en- 
crypting contents information into encryption-result- 
ant contents information in response to the first-key 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 
ing a part of the first-key base information in re- 
sponse to the second-key signal to convert the first- 
key base information into encryption- resultant first- 
key base information; the method comprising the 
steps of: 

identifying the predetermined key generation 
algorithm in response to algorithm identification 
information for identifying the predetermined 
key generation algorithm; 
generating a second-key signal representative 
of a second key on the basis of the initial-value 
information and the identified key generation 
algorithm; 

decrypting encryption-resultant first-key base 
. information into original first-key base informa- 
tion in response to the second-key signal; 
generating a first-key signal representative of a 
first key from the original first-key base informa- 
tion; and 

decrypting encryption-resultant contents infor- 
mation into original contents information in re- 
sponse to the first-key signal. 

20. An apparatus for decrypting encryption- resultant 
contents information generated by an encrypting 
side which implements the steps of generating a 
first- key signal representative of a first key from 
first-key base information being a base of the first 
key; encrypting contents information into encryp- 
tion-resultant contents information in response to 
the first-key signal; generating a second-key signal 
representative of a second key on the basis of ini- 
tial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; 
and encrypting a part of the first-key base informa- 
tion in response to the second- key signal to convert 
the first-key base information into encryption -res ult- 
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ant first-key base information; the apparatus com- 
prising: 

means for identifying the predetermined key 
generation algorithm in response to algorithm 5 
identification information for identifying the pre- 
determined key generation algorithm; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of the 
initial-value information and the identified key io 
generation algorithm; 

means for decrypting encryption-resultant first- 
key base information into original first-key base 
information in response to the second-key sig- 
nal; is 
means for generating a first- key signal repre- 
sentative of a first key from the original first-key 
base information; and 

means for decrypting encryption-resultant con- 
tents information into original contents informa- 20 
tion in response to the first-key signal. 

21. An apparatus as recited in claim 20, wherein the 
identifying means comprises means for selecting 
one from among a plurality of key generation algo- 25 
rithms in response to the algorithm identification in- 
formation as the identified key generation algo- 
rithm. 

22. An apparatus as recited in claim 21, wherein the 30 
means for generating the second-key signal com- 
prises a linear feedback shift register having a feed- 
back object position which is set in accordance with 

a primitive polynomial in the identified key genera- 
tion algorithm. 35 
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